RHSA-2026:36345: Moderate: Red Hat JBoss Enterprise Application Platform 8.1.7 security update
Moderate: Red Hat JBoss Enterprise Application Platform 8.1.7 security update
Other sources
Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 8.1.7 serves as a replacement for Red Hat JBoss Enterprise Application Platform 8.1.6, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 8.1.7 Release Notes for information about the most significant bug fixes and enhancements included in this release.Security Fix(es): io.undertow.jastow-jastow: Jastow Cross-Site Scripting attack due to unsanitized URI (CVE-2025-12799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Red Hat JBoss Enterprise Application Platform 8 (WildFly)to a version that resolves this vulnerability.Fixed in 8.1.7 - Operational
Back up your existing installation, including all applications, configuration files, databases and database settings, before applying the update.
- Operational
Before applying Red Hat JBoss Enterprise Application Platform 8.1.7, make sure all previously released errata relevant to your system have been applied.
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:36345?
The severity of RHSA-2026:36345 is classified as medium with a score of 4.
How do I fix RHSA-2026:36345?
To fix RHSA-2026:36345, update the Red Hat JBoss Enterprise Application Platform to version 8.1.7.
What issues does RHSA-2026:36345 address?
RHSA-2026:36345 addresses security vulnerabilities in Red Hat JBoss Enterprise Application Platform 8.
Who is affected by RHSA-2026:36345?
Users of Red Hat JBoss Enterprise Application Platform version 8 prior to 8.1.7 are affected by RHSA-2026:36345.
When was RHSA-2026:36345 published?
RHSA-2026:36345 was published on July 7, 2026.